Setup Squid Guard (Proxy Server) on Pfsense

In order to setup Squid Guard you should have two packages installed on your Pfsense for it to work properly.

First package should be Squid 3 (In case you're publishing Exchange web services with it) or Squid if not.

Second Package would be Squid Guard-Squid3 for Squid 3 or in case you don't have Squid 3 you can use the normal "Stable" Squid-Guard version for Squid. 

In my case I am using Squid 3 because I use its reverse proxy to publish Exchange web services so I will install SquidGaurd-Squid 3 to configure its proxy server.

I already downloaded and installed it but If you didn't do so then you will have to navigate to >System > Packages >Available Packages and there you can find it and install it.


From the Services Menu drop down you will find those 3 below (Proxy Filter, Proxy Server and Reverse Proxy) 


First I will go to Proxy Server tick which Interfaces I want to enable the proxy on (LAN, DMZ) and Enable "Transparent Http Proxy" and "Allow users on interface" in the General tab page


If you scroll down you will find "Logging Settings" and other options that you don't need to enable. Logging is required mostly for troubleshooting times.

Next I will go to "Local Cache" tab and change the Squid Hard Disk cache Settings in order to take more than 100 mb. I will make it 5000mb which is 5 GB to make internet browser faster for users who visit the same websites often.

After that you don't need to do anything except saving changes in the end of the page below


Now I will go to "ACLs" page and enable the Local networks that I have, I will write them in the "Allowed subnets" section and save the page. 


Now I am finished with the Proxy Server settings, I will go to Proxy Filter and I will scroll down to the end of the page to Enable Blacklist option and paste the link below then click Save to save the changes



Now I will go to Blacklist tab to download the black list from there then I will copy the link below and press on Download


When I finish downloading I will go to "Common ACL" tab page and configure the Rules there which we have downloaded. As you can see below I have everything already configured but in order for you to configure it you will have to press on the > Green Start button first of all

 
After you press on the Green button It will show you the rules that you want to configure. I have already configured (Alcohol, Deny, Gambling, Hacking, Social net)…

Then next I will configure the Redirect mode and type my own customized message that will appear to the clients behind Pfsense and use safeSearch.


When done I will save this page and go to the General tab page and will click on Apply all changes and save the page.

 
Note:
you should see that SafeGuard service state "Started" in order for it to work. If for any reason the service is not started try to navigate to >Status > System logs  and check your logs here if there's anything related to SafeGaurd or Squid.


Now I will go to the Client and check if my client with "Pfsense as their default gateway" will respond to the Safe Guard rules or not.

I tried opening Facebook or Twitter but both are not working and they gave me the same message which I have customized in Pfsense.  

Over all this had been easy setup and everything works perfectly
Hope this would be useful to you all.

Special thank to
http://www.moh10ly.com/blog/pfsense/setup-squid-guard-proxy-server-on-pfsense

Comments

Unknown said…
Nice post...I look forward to reading more, and getting a more active part in the talks here, whilst picking up some knowledge as well..
1337x UK proxy

October 9, 2015 at 1:37 PM
Post a Comment

Popular posts from this blog

Working with Columns on the Joomla Frontpage

Image
Working with Columns on the Joomla Frontpage Log into your Joomla 3.0 Admin dashboard In the top menu, click  Menus  and then click  Main Menu  (or the menu with a logo of a house to the right) In the list of Menu Items, find and  click on the menu item  that has a  yellow star  under the Home  column Click the  Advanced Options  tab at the top of the page Click to expand the  Blog Layout Options  section You'll want to pay attention to the following settings: # Intro Articles Number of articles to show after the leading article. Articles will be shown in columns. # Columns The number of columns in which to show Intro Articles. Normally 1, 2, or 3. For the columns setting, enter the number of columns that you want. Then, enter the number of articles that you want to show in columns. For example, if you have 3 columns and 4 intro articles, you'll end up having 2 rows of three columns, but two columns will be blank. When finished making changes, click the  save  button i
Read more

Create your own Nameserver using TinyDns on Pfsense

Image
If you ever thought of hosting your own Public DNS for your own domain then this article is going to be of help for you as I will go through the process of hosting my own Public DNS for my freely acquired domain www.moh10ly.cf These free domain providers have poor Public DNS capabilities and usually lack of many DNS records e.g. (SRV, TXT, PTR) and that what made me personally want to go on and host my own public DNS for this domain. I'm going to use Pfsense 2.1.5 for this demonstration but I guess 2.2 also works as well but haven't tried TinyDns on it yet. Ok so t o configure your own nameserver, first you must have a public domain (domain.com) ..   In this example I will register a free domain from this registrar:   www.freenom.com The process for registration is pretty simple, you will have to follow the wizard and validate your email then sign in to  your  portal to edit or configure your free domain. I have already added a new domain for myself
Read more

Block Facebook on Pfsense using WPAD Autodiscover feature

Image
How to Block Facebook on HTTPS on Squid proxy server without importing IPS/CIDR or configure Clients browsers for the Proxy settings using the WPAD Autodiscover for Squid feature Note: Before you begin reading this article, you must have the proxy filter configured to deny SocialNet in the blacklist in Service / Proxy Filter / Common ACL In order to block Facebook or any other website on HTTPs protocol on pfsense (SQUID) without finding all the CIDR or IPs to block facebook or any other website's IPs we will have to use the Squid proxy's Autodiscover feature which uses Wpad file .. Let's say similar to how Exchange uses Autodiscover's XML file. Prerequisites In order to block sites on HTTPS you will need to have SQUID Guard proxy installed and configured on Pfsense. If you don't know how you can look it up   here .  In order to use this feature you will have to disable the transparent mode on Squid server, To do so navigate to proxy server un
Read more